Cloud Security Consultant | Hybrid/Remote

Ernst & Young Advisory Services Sdn Bhd; Wrocław; Hybrid; PLN 180,000 - 280,000; Full time

Job summary

EY GDS Poland is seeking an Information Security Consultant to provide security guidance across cloud-based solutions, support the SDLC, and conduct risk assessments to derive risk treatment options. You will collaborate with Architects, Developers, IAM engineers, and Project Managers in a hands-on role focused on secure design, architecture, and delivery for critical services.

You will work with cross-functional teams to ensure robust security controls and compliance with ISO, NIST, and COBIT

Qualifications

• Seven or more years in IT disciplines with five+ years in information security.
• Experience validating security requirements for applications and cloud services.
• Knowledge of ISO, NIST, COBIT and related standards.
• Proven ability to lead vendor risk assessments and 3rd-party reviews.

Responsibilities

• Direct information security assurance efforts with third parties and vendors.
• Perform risk assessments of cloud services and hosting infrastructure.
• Define security controls and translate risks into actionable requirements.
• Guide DevOps teams through secure deployment and change management.
• Communicate findings to management and stakeholders.

Skills

Security architecture & design

Cloud security

Risk assessments

IS standards (ISO, NIST, COBIT)

Agile & DevOps

English communication

Education

BSc or MSc in Computer Science / IT or related

Tools

Kubernetes

Java

.NET

NodeJS

Angular

Power Apps

Job description

EY GDS Poland is seeking an Information Security Consultant to provide security guidance across cloud-based solutions, support the SDLC, and conduct risk assessments to derive risk treatment options. You will collaborate with Architects, Developers, IAM engineers, and Project Managers in a hands-on role focused on secure design, architecture, and delivery for critical services.

You will work with cross-functional teams to ensure robust security controls and compliance with ISO, NIST, and COBIT